CycloneDX / CycloneDX/transparency-exchange-api

Can we outside of artefact indicate content

Open
#244 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
113
Forks
22
Avg merge
8d 12h
Merged PRs (30d)
5

Description

Specifically the question started with "I don't want any CycloneDX that contains patent information".

But can we indicate some more detailed level of the types of information that exists in a CycloneDX file, especially for 2.0?

- Patent
- SBOM
- CBOM
- AI/ML
- Attestations (CDXA)
- ?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.